$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145199.roa File: AS145199.roa (raw, json) Hash identifier: VJgaDzSOrsMw9wqeHRpA8OWzLCn/ZUVGgNS7FOdo3ug= Subject key identifier: B8:C9:D3:FB:55:83:22:1B:CD:B0:2D:27:24:97:94:55:40:5A:13:DA Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6688E8D9460DF9EDAE499AD9B998AA5CE47EBE8C Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145199.roa Signing time: Wed 04 Mar 2026 06:19:59 +0000 ROA not before: Wed 04 Mar 2026 06:14:59 +0000 ROA not after: Wed 03 Mar 2027 06:19:59 +0000 asID: 145199 IP address blocks: 240a:a9f5::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:88:e8:d9:46:0d:f9:ed:ae:49:9a:d9:b9:98:aa:5c:e4:7e:be:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:59 2026 GMT Not After : Mar 3 06:19:59 2027 GMT Subject: CN=B8C9D3FB5583221BCDB02D2724979455405A13DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:50:26:6d:30:50:45:48:1f:29:bf:16:1a:b0: ac:3f:b0:a9:2a:03:02:35:c4:19:6f:a0:69:1a:98: c3:65:35:e1:e5:fe:b2:f1:b1:38:2b:33:65:fb:22: 95:ba:e0:d9:dc:b6:36:90:7d:89:12:3b:a1:bc:93: 43:37:62:26:37:cc:00:c5:09:32:18:a8:39:e8:6c: d0:ec:a5:69:49:46:61:c7:2f:d3:a8:05:ad:c1:e4: e6:31:9a:bf:29:21:55:20:4e:ff:2b:06:e1:72:71: 04:4f:76:d1:2f:76:25:79:e9:ec:72:2f:55:07:0e: fb:74:13:fd:68:d2:2e:e3:6f:68:cb:a6:50:6e:17: de:a1:a5:48:b7:07:e7:13:d4:a2:5c:a8:7a:94:4a: a5:95:6b:4c:4c:dd:ad:09:0b:63:66:15:b1:3f:7a: cb:bf:83:f6:7a:db:0f:05:1b:3b:a4:d9:ed:2c:e9: 91:b0:31:7f:c9:6a:13:02:ab:f4:8a:47:4f:78:c3: b5:9f:7b:94:4a:6a:e8:94:f0:1c:25:31:4d:8d:fb: bb:94:d8:e4:8a:15:40:b5:22:54:90:14:cb:e7:91: 8c:89:08:82:8c:84:70:07:4c:df:c5:82:50:0f:55: 00:9f:d2:cf:13:20:a8:57:64:85:7b:98:ca:ec:54: 37:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:C9:D3:FB:55:83:22:1B:CD:B0:2D:27:24:97:94:55:40:5A:13:DA X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145199.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a9f5::/32 Signature Algorithm: sha256WithRSAEncryption 8e:8c:91:01:8e:24:97:f9:70:83:c5:ae:c2:1b:11:5f:12:b6: 60:b7:65:33:6b:65:27:20:38:26:c3:4c:ac:34:98:79:a1:44: 3e:58:3f:f4:d8:4c:10:aa:e5:f8:61:96:14:5b:15:da:b8:d2: 3c:07:c2:95:a2:21:a5:df:18:b2:38:69:d1:35:7c:e1:35:47: 3a:6c:06:fa:70:09:43:19:0b:eb:cc:59:d5:81:8b:f3:22:ec: af:aa:a8:b0:6f:2e:93:12:71:e9:83:ae:75:2b:3f:af:cd:df: c1:fa:79:65:78:67:39:59:26:cc:40:0b:a2:b4:28:55:09:1f: 0b:86:80:04:71:8c:93:64:c9:c1:f0:d6:0d:ef:bd:e1:5e:50: 7f:19:db:0e:f0:ba:6a:db:b5:a4:20:5d:5c:e1:1a:76:c0:a7: 08:d2:ef:6b:3a:c8:dd:cd:af:75:97:57:43:10:ff:48:bf:93: 44:fe:6c:ec:f3:d6:1e:ce:e1:0a:d5:60:d3:ef:05:66:43:02: fc:63:28:13:a7:8a:a2:9e:f3:4f:72:7c:c9:8e:b9:39:b2:db: 2d:c4:c2:b2:4b:a6:0d:f3:3f:08:33:bd:06:43:01:60:aa:cd: 43:3a:cc:92:79:54:29:79:9e:a7:0c:37:75:00:c6:38:ea:a8: 4c:a4:17:96 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUZojo2UYN+e2uSZrZuZiqXOR+vowwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQ1OVoX DTI3MDMwMzA2MTk1OVowMzExMC8GA1UEAxMoQjhDOUQzRkI1NTgzMjIxQkNEQjAy RDI3MjQ5Nzk0NTU0MDVBMTNEQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKJQJm0wUEVIHym/FhqwrD+wqSoDAjXEGW+gaRqYw2U14eX+svGxOCszZfsi lbrg2dy2NpB9iRI7obyTQzdiJjfMAMUJMhioOehs0OylaUlGYccv06gFrcHk5jGa vykhVSBO/ysG4XJxBE920S92JXnp7HIvVQcO+3QT/WjSLuNvaMumUG4X3qGlSLcH 5xPUolyoepRKpZVrTEzdrQkLY2YVsT96y7+D9nrbDwUbO6TZ7SzpkbAxf8lqEwKr 9IpHT3jDtZ97lEpq6JTwHCUxTY37u5TY5IoVQLUiVJAUy+eRjIkIgoyEcAdM38WC UA9VAJ/SzxMgqFdkhXuYyuxUN/UCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBS4ydP7 VYMiG82wLSckl5RVQFoT2jAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTE5OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qfUwDQYJKoZIhvcNAQELBQADggEBAI6MkQGOJJf5cIPFrsIbEV8StmC3ZTNrZScg OCbDTKw0mHmhRD5YP/TYTBCq5fhhlhRbFdq40jwHwpWiIaXfGLI4adE1fOE1Rzps BvpwCUMZC+vMWdWBi/Mi7K+qqLBvLpMScemDrnUrP6/N38H6eWV4ZzlZJsxAC6K0 KFUJHwuGgARxjJNkycHw1g3vveFeUH8Z2w7wumrbtaQgXVzhGnbApwjS72s6yN3N r3WXV0MQ/0i/k0T+bOzz1h7O4QrVYNPvBWZDAvxjKBOniqKe809yfMmOuTmy2y3E wrJLpg3zPwgzvQZDAWCqzUM6zJJ5VCl5nqcMN3UAxjjqqEykF5Y= -----END CERTIFICATE-----Generated at Sat Mar 28 13:18:05 2026 by rpki-client